




FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS; 



System does not coded:, maintain. or disseminate PM, 

System is mandOtherod On existence before 4/i7/SOOT .no later changes posing small icad' privacy risks;, 
irdorntalton in site system relates to haemal government operations 
System has Seen previously assessed coder an maina-ion similar to a PIA 
NO signs Meant. nnvaev ismes tor povaev issues am unehanned). 

Other: 
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.X... 1 he sysicrsvpnyeel prcvklea apcsba! proieckoo is.; SWs ;e.q.. Nobb; arc 

encrypicd. hidden ;d\.c;; ah risers vin a look-up adhe, or only available io certain 
users). Idesenbe: Only a ieo Sysren; Adudrashcnoss have access U> ihc dais an 
ore also required a.; Hie a biraonnai Disclosure idaaa ananaih. An inkssnaiion 
Ns -scan Security Obhoer ; iSSO; reviews audit asps r-n a seecho basic and sen-vis 
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NAME OF SYSTEM / PROJECT; 


BIKR FBI Utjjqae Asset®: ... 


! SYSTEM/FECMECT f»OC 


FBI' DIVISION INTERM EDIATE AFPROY ALS _ 

v V >. " N ’ ' , " 0 

executive as Division deter mine s) 

a o ' ' N 'w i' 


Directorate of 
Inkbbgence: 


After sdi division approvals, forward signed' ftsrd copy pins eleetronk eopy to FBI OOC/PCLU (JEM ?3:S(I). 
(The FBI Privacy and Civil Liberties Officer's determinations. conditions. and/or final approval will be recorded on 
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I Ml A.MM1 FIMIMR OfRClAl. INF ONI \ 


FIN 41 FBI APPROVAL / DETERMINATIONS / CONDITIONS; 


_PIA i;; required by the E-Government Act. 

PIA is to be completed as .a. matter of FBI/DOJ discretion, 
is P1A to be published on FBI.GOV (after any RMD FOIA redactions)? .Yes. .No 


X PiA is not required for the following reason(s'): 

System does not collect, maintain, or disseminate Pli. 

System ts grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks), 
information in the system relates to internal government operations. 

System has been previously assessed under an evaluation similar to a PIA. 

JX., No significant privacy issues (or privacy issues are unchanged). The system is not intended to capture PH and 
any fit that is captured is not retrieved by name or personal identifier. 

......... Other 


Applicable SORN(s):' . Central Records System. DQJ/FB14102 . 

Notify FBI RMDflUDS per M10G 190.23? JC__.No _Yes-See sample EC on PCLU intranet website here: 

http home DO/OOC/I EB POM fAvhe>Civii%20l,ibetties%20Libmn' form_for_mh>gl90'-2^3 m ec.vvpd 

SORN/SORN rev Isionf s) required? X No Yes : 

Prepare rev ise add Proac> Act«e}(3} statements for related ft>rnts? _ No _1 cs . 


Rf CORDS. The program should consult with RMD to identity’resolve any Federal records/eleetronie records issues. The 
system may contain Federal records whether > irn t contains Privacy Act req estsand ir any event a records sched e 
< >p roved by the National Archives and Records Administration Is necessary RMD can provide advice on litis as we las s 
compliance with requirements for Electronic Recordkceni tg Certiflcat on a id any necessary who, v 
Oilier:.i...... " ' j 



























ATI ON ABOUT THE SYSTEM / PROJECT 


Provide is general description of the system nr project that includes: (a) 
name of the system/project, including associated acronyms; (b) structure of 
the systeia/projeet, including interconnections with other projects or systems; 
(c) purpose of the system/projeet; (d) nature of the information its the 
system/project and how It will he used; fe) who wall hove access to the 
information in the system/project; if) and the manner of transmission to all 


serai description of the system or project that include; 


of the system/projeet, including associated ace 


-06-04-FBI-FOIA-2015041; 


iuction 





m Structure of the sysiem/preject, including Interconnections 
or systems; 



(c) The purpose of the system/project; 









b7E 



;d) Nature of the information i» the system/project and how it will 


|No personal identifying information (P1I) w; 
an authorized law enforcement purpose, ? 


(c) Who will have access to the information m the system/prnfe 


the information 


(f) Manner of transmission; 


2> Does the system/project collect, maintain, or disseminate any information abd 
indiv i duals (Le,, a human being or natural person, regardless of nationality}? 


jX YES While the system is not intended to colled, ma intain, nr disseminntei 
any information about Individuals' it is possible that it will | 


3. Please indicate if any of the following characteristics apply to the informal® 
system about individuals: Bear In mind that log-on information may identity o 
linkable to an individual. 

(Check ail that apply.) 


-06-04-FBI-FOIA-2015041 


Suction; 




I'he information directly identifies specs He individuals 

The information is intended to be used, in conjunction with other data dements. 

So indirectK identify specific individuals. 

_ X The information can be used to distinguish or trace an individual's identity I- e.„ It 
is linked or linkable so specific individuals). While the information colle cted is 
not intended to be used for this, if is possible that | ~| may b7E 

■allow for distinguishing or tracing an Individual's identity, 

if yon marked any of the above, proceed to Question 4, 

None of the above. If none of the above, describe why the information does not 
identity specific individuals euher directly or indirectly. 

4 1 )oes the sy stem project pert an out} to government employee soitfraCiorv or 

consultants? 

__X.NO ..YES 

r ? infos manon about l nsted States ml-yens ot a a T, h admitted permanent lesdent 
aliens retrieved from the system/project by name or other personal identifier? 

.X.NO. |if no, skip to question ?,| 

YES. |ff yes, proceed to the next question,! 

6. Does the system-project collect any information directly from the person wins is the 
subject of the inlbrtnahon? 

.NO |If no, proceed to question 7<1 

.YES 


a Does the system ptmect support criminal, €T, orfCI investigations or 
assessments* 

..... NO 


NFS [Ifyc^, proceed to question ?,) 


h. Are subjects of information from whom the information is directly collected 
iprovkied a written Privacy Act ie)(3) statement (either on the collection form or via a 
separate notice)? 


EPIC-1397 
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iUNCLASMFIEIMFOR OFFICIAL 'USE 


NO [The program will need to work with POLL to develnp/iniplenienf 
the necessary for*»(sk| 

YES Identify any forms, paper or electronic, used to request such 
information from the information subject: 

7, Are Social Security 'Numbers (SSNs} collected. maintained or disseminated from the 

N , ^\\n S', ' ' V ,v * V S V u 

X NO YES If yes, cheek all that apply; 


\"\ \ W\'Vl ' I 0 ^ ' .O' ' V V , s ‘ ' O s . ' u - ' ‘ N 

\utue-e.es or sources m this iao onto: cement or nudlmencc oeo\ its. 


V W S > <.*' ' , ' , \ S ' x - 

system. 

SSNs are impottanf for other reasons. Describe; 

1 ho eystoo! mvu\P pun tdos spec A pn-Nvbon to S>\s a „ \SV .re 

, ^ ' o < , S ' * «< \ o *' v ' , 

users). Describe: 

" < , O ' * \ ,,N , , P \ l S\, ' 

SSNs. Explain; 

8. Is the system operated by a contractor? 

X.No. 

.Yes. Information systems operated by contractors for the FBI may be 

,S < ,, ' ' O \ 'V\ Oi ' vs v ! * V. \w ) 

contains standard contract clauses that must be included .in the event the system 
w ' \ - e N". ' ' " at e v 1 ' w v \ . v v. 

imposed as a matter of Department, of Justice policy. Const.btat.ioas with, the 

v V ' ' V > - ' ^ '.t s \ 

system for the FBI. 

A s e , 'oo ..e\ v * v» * ot \m vO v \ . ' \ * N 

Security Division (SecD)? 

...X .NO if no, indicate reason; If CNN A Is pending, provide anticipated 

completion dale; 
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UNCLASSIf IED//FOR OFFICIAL USE ONLY 

Since this is part of a phot project, it has not undergone C&A at this point, 
I However, it. will go through C&A at the appropriate stage. 

YES If yes, please Indicate the following, if known; 

Provide date of last C&A eerllfieation/re-eerdlieatlon; 


Confidentiality; 

_I.4>W„ 

[_Moderafe__ 


Undefined 

Integrity; 

i.Low-'. 

Moderate 

.High 

_ Undefined 

Availability: 

Low 

AM ode rate _ 


_Undefined 


.Not applicable •••• this system is only paper-based. 

10. Does the system conduct data mining as defined in Section 804 of the 
implementing Recommendations of the 9/1.1 Commission Act of 2007, PA. 110- 
53 wodiltsd as A3 l At AOOevA A 

.X.NO 

YES If yes, please describe the data mining function: 

11. Is this a national security system (at; determined by the Sec-D)? 

.X.NO .YES 

12. ''.'eo \\ - ' A' v . 

X Tins is e new system/ project in development. 

fL EXISTING SYSTEMS / PROTECTS 

1. When was the sycsfem/prqject developed? 

2. s ^ N s ' , v V \ - p , , >1 <. - ' O V' 

;. \t > | h n- •. pK\wd m nc'-t noeseun TI 5 > 1 

YES If yes, indicate which of the following changes were involved (mark ail 
changes that apply, and provide brief explanation for each marked change): 

A eon version from paper-based records to an electronic system , 

UN Cl,ASSiLIlMF01 OFFICIAL !Alii ONLY 
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UNClLASYfFlEIY/FOE OFFICIAL USE ONLY 


A change from information in a format (hat is anonymous or non- 
k'knvdfk ■■ , to a format that i $ dr disable 10 particu at nd r iduaLs 

A new use of an IV system ruy-ecs.. including application ot a new 
technology. that changes how information in idenuiiahle form Is managed 
U ot example change ha » i d emote a mote open; cor toomv rt and o s 
avenue for exposure of data that previously did not exist.) 

A change that results in information in identifiable form being 
merged, centralized, or matched with other databases. 

A new method of authenticating the use of and access to 
information m identifiable form by members of the piddle. 

A sy stematlc Incotpcr ation of data hi tses < di infor mahon in 
ident!liable form purchased or obtained from commercial or public sources. 

A. new interagency use or shared agency function that results in 
new uses or exchanges ofinfortnahon in identifiable torm 

.. A change that results in a new use or disclosure of information in 

identifiable form. 

A outage that 'esuhs In new items of nuormahoo in uiermuaHc 
form being added into the systenYproject. 

Changes do not In cols e a change in the rt pc of records maintained 
the hidh iduals on whorn mcords are maiutaii ed or the use ot 
dissemination of information front the system .■project'. 

Other fFnnkle hrief explanation!; 
lives a hi \ for t'us system prweet already exist' 

..NO .YES 


a. Provide dafc/ihle of the FI At 

'*■ las the s v stem pfo e*. . tdetgoue arts sb d deans c h tecs si n e the C V 1 

NO f:S 
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(OGC7PCLIJ (Rev. 08/'?9/2013) 


FBI PRIVACY THRESHOLD ANALYSIS (FTA) 

NAME or SYS; EM ' ER< *JU I \ " 


B.IKR FBI Unique Asset ID; SYS-Q08 0035 



SYSI’EM/PROJECT FOC 

FBI OGCVPCLU FOC; 

Ha-Mtsed do: 

Name; Electronics Technician] < 

Name: AOCl 1 

HrUNOO- 

Program Office: ET Operations and 

Phone: | | 

Deeb.sss.fy Oo; 

Development Unit fEODU) 

Division: Operational Technologies Div. fOTD) 

I’te'd 1 

Room Number: ERIC Quantieo 

Room Number: 7350 JEl i 



Program Manager (or other appropriate 
executive as Di is on de r n ne } 

Division Privacy Officer 

Program Division: 

Signature: 

Signature: 



Date signed: 

Date signed: 



Name: 




Title: --- 

IVJe 1 


FBI HO Division: 

Signature:! I 

Signature] 


Operational 

Date signed: }4 T 

uate signed: .TW Nftf 

Technologies Division 

Name:| j 

Name: SSAl 1 4 f 

(OTD) 

Title: Program Manager, OTD/EODU 

Title: Assistant Section Chief. OTD/<STO 


After all division approvals, fomacd signed hard copy pins electro 
ik i! >, > '‘ K ' k ' n N >. ? 


;opy to FBI OGC/PCU.? i<IEH 7350). 
md or tmaf approval wilt be recorded on 
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* i -N ll i //'FOR OFFICIAL USE ONLY 

FINAL FBI APPROVAL / .DETERMINATIONS / CONDITIONS: {This section will be completed by Ihe FBI 
iX a K ' O ' fom * ■ ' I 'Mb t v« wn *>< ' ^ VU. a mt««.m,j»wg.j_ 


_PSA is required by the E-Government Act. 

PS'A is to be completed as a matter of FBi/DOJ discretion. 

Is P1A to be published on FB1.GOV (after any RMD P01A redactions)?_Yes. 


_ No (indicate reason): 


X PSA is not required for the following reason(s): 

Svstem does not collect, maintain, or disseminate PH. 

.Svstem is grand fathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

""X_ Information in the system relates to internal government operations. 

Svstem lias been previously assessed under as? evaluation similar to a PI A. 

"T No significant privacy issues (or privacy issues are unchanged). Privacy issues nave remained unchanged 
since the previous PI A for FOISS was approved on December 10, 2009. 

Other (describe?: 


Applicable SORN(s): .Sesairjty.AecessConM^^^^ 


Notify FBI RMD/R1DS per MIOG 1.90.2.3? JL. No ._Yes~$ee sample EC on POLO intranet website here: 

http://ltome/DG/OGC/l..'i'B/PCi..ll/PrivacyCivil%20[dberiies%20l..ibrary/fomi for miog 190-2-3 ec.wpd 

SORN SOIN u'^ionfslo-qtmmP X_No 'Ns m - ■>' ' <■ ! > 5 


Prepare/revise/add Privacy Act (e>{ 3) statements for related forms? _X_ No 


RECORDS' xiie orogravn shoriIdeonsnIt with RMD to identify/resolve any Federal records/elcetronie records issues. 
The svstem may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary RMD can provide advice on this 

as j C( | uk vith re ement lorj_. R 3 fdkeepi.ng < » at id assy s f Dies 

'Other" . 


Unit Chief. Privacy and Civil Liberties Unit 
FBI Priv acy an d Civil Lib erties Officer . 


Signature! 
Date SigsterTj 


: ■ NC'I..ASS1FIEt >//FOR OFFICIAL USE ONLY 
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SbNCL,ASSiI'JO>//FOR OFFICIAL USE ONLY 

Records from ! | inoiodim.i access and audit logs, are maintained oil-line by b7E 

each Held Office for two years. 

2. Does the system/project codecs, maintain, or disseminate any information about 
individuals ti.e.„ a human being or natural person, regardless of nationality}? 

NO 


X.VMS {If yes, please continued 

The s>stem contains tb c names v_ l__Bl jvrsonnei (employees, contractors, co nsu [tarns. 

assd task force officers; ! I The names b7E 

of these isidh Idtsab arc the onh personal identifiers contained in I ~| 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind, that tog-on information may identify or be 
linkable to an individual. 

(Check all that apply.) 

X The information directly identifies specific individuals. 

The individuals identified in | l ire all FBI personnel: see response to Q.2. supra. b7E 

The information is intended to be used, in conjunction with other data elements, 
to indirectly identify specific individuals. 

The information ears be used to distinguish or trace an individual's identity the., h 
Is linked or linkable to specific Individuals). 

If you marked any of the above, proceed to Question 4. 

None of the above. If none of the above, describe whs the information does not 
identify specific individuals either directly or indirectly. {If you cheeked this item, 

STOP here a her providing the requested description^ 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

NO X YES 


See responses to Q.2 and Q.3.. supra. 

5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved front the system/proivet by name or other personal, identifier? 

NO, | If no, skip to question ?.] 
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X VTS (!f yes s preeeed to i he ae,\ t qise«tiea<) 

In addition to user acce ss and activity data, the personal information that may be _ 

i retrieved from| Iconsisis of the name s of individuals who have been ] ~| b7E 


6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

NO j'lf no, proceed to question ?.j 

.X Yl-S 

o Duo' ike y'•tom p'ojc.,1 mppon crm.n.b. f K i v, I uisecU Canons or 
assessments? 

.X NO 

'V ES i 1 f yes, proceed So question 7>j 

h. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act ic){3} statement (either on the collection form or via a 
separate notice)? 

__ NO 11 he program will need to work with PCLU to develop/implement 

the necessa ry fonn(s).| 

X \bs identify am forms, paper or electronic, used to request such 
information from the information subject; 

i A Pri vacy Act system of records notice (SORN) tor thj | 

| [ provides genera! notice 

of the routine uses that mav be made of information in the svstem, such as the date and 


7. Are Social ? is' t J s ? , s I 

system project? I nil SSNs should only be used as Identifiers in limited instances. 

\ No VIA It ves, cheek all that applv 

SSNs are necessary io establish/conflrm the identity of subjects, victims, 
witnesses or sources in this law enforcement or intelligence activity. 

SSNs are necessary to identify FBI personnel in this internal administrative 

system. 
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kssinnv/FOR official use only 


SSNs are important tor other reasons. Describe: 

'The system/project provides special protection to SSNs (e.g„, SSNs are 
encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

it is not feasible for the system/project to provide special protection to 
S'An Fv plain: 

S, Is the system operated by a contractor? 

.X.No. 

..Yes. Information systems operated by contractors for the FBI may be 

eonsidered Privacy Act. systems of records. The federal Acquisition Regulation 
contains standard contract clauses that mast be included in the event the system 
collects, maintains or disseminates PI 1 and additional requirements may be 
imposed as a matter of Department at Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification. & .Accreditation (C&A) by the FBI 
Security Division (SccDf? 

NO If no. indicate reason; if C& A is pending, provide anticipated 
completion date: 

.X.YES If yes, please Indicate the following, if known; 

Provide date of last CX A eertification/re-eertilleatirtn: June 15, 2009; | | b7E 

currently has Authority to Operate ( ATO) through February 26,2015 at the following 


Confidentiality: 

_Low 

X Moderate 

__High 


Integrity: 

_Low 

X_ Moderate 

_High 


Availability: 

_Low 

\ Moderate 

_Jiigh 


Not applicable 

this system 

Its only naper-based. 




10. Does the system conduct data mining as defined in Section 804 of the 

Implcniv. nu va RocmmreoJat-ats of the 9'!: Cownv.sAm Act of 2b07, p,l ; ft> 
53 ('codified at 42 USC 2000ec-3)? 


' u^*mmm P h\u only 
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X NO 

YBS If yes, please describe the data mining function: 

11. is this a national security system (as determined by the Seel.)}? 

.X.NO .YHS 

12. Status of System/ Project; 

This is a new system/ project in development. 

if, existing s\si fm.n mancis 

1. When was the svstem/proiect developed? I I was developed prior to April 17. b7E 

200.1 

2. Mas the system/proiect undergone any significant changes since April 17, 2003? 

NO Hi no. proceed to next question {IL3}.j 

N YES If yes, indicate vvhich of the following changes were involved (mark all 
changes that apply, and prov ide brief explanation for each marked change): 

on orn paper c ords to an elet tysten 

A change from information in a format that is anonymous or non- 
idemtriable to a format that is identifiable to particular individuals, 

A new use of an IT systent/prqieet, including application of a new 
technology, that changes how information in identifiable form is managed. 

(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist) 

A change that results in information in identifiable form being merged, 
centralized, or matched with other databases. 

A new method of authenticating the rise of and access to information in 
dentillable > n ay me shew o'* he public 

A systematic incorporation of databases of information in Identifiable form 
purchased or obtained from commercial or public sources. 

A new -interagency use or shared agency function that results in new uses 
or exchanges of information in identifiable form. 


— * u * 6 om \ 
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enables, tor example- system updates to be pushed front the FO HQ without requiring 
that a technician visit each subordinate facility to update hardvvareHothvare. 

II ___ Other: 

iiiltlll a PI A for this s> stenv'projeot already exist? 

.x .II .HI 

A PTA-for i | w as nrev iously approteel on December 10. 2009. b7E 

a. Provide date/titie of the PI A: 

K Has the system project undergone am significant changes since the Pi A? 
11 | Vi'S 

{The PI A is non e.ompiete -and after do Hion approval^} should he submitted to 
FBI <)(><' P< I t' for final FBI approval sad determination if Pi A and/or other 
notions are required.! 
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b7E 


' ' ' iMIS VM, 'X V .'NO ! 'NS: 


.PI A is respited fey the EXmvertmrent Act 

Pi A is to be completed as a mattes' of FBI DOJ discretion. 

Is PI A to be. published m FBI.GOV (after any RMO FOIA redactions}? Yes. No 


HA k net respired .for the following reasonts); 

_System does not collect, maintain, or discernirsate f IF 

System A grtmdfathered (is v v bef % < ^ v v eh ges posing s c ? pm y s \ 

.Information in the system relates ttdetsrna! gev«(aaM operations. 

System has been previously assessed under an evaluation similar to a PLA. 

X No significant privacy mvmifar privacy issues are unchanged). 

Other: 


tppivahle SOR'-osc Bcman Madmg i ms, fJO v FB1-00\ t'ennai Records Sysmm sy Rx) IRIK Bl-mC__! 

Notify FBI .KMD/RIDS per MKX3 190.23? .No ..X. Yes-Sec sample EC on PCU? Intranet website here; 

ttp * uk IXYOt t LTS.'PCLl PrivaeyC si 2o| iberties^olOl ;>rar> !<-> m U » hog 00-2 * ce evpd 

SORN/SORN revssionta) required? % N o _Yes: 


Prepare/revise/add Privacy Act <e)P> statements for related forms? 


RECORDS. The program should consult wild RMD to idemiMresolve any federal reeords/electronle records issues. 
The system may contain Federal records whether or not n contains Privacy Act requests and. in any event., a records 
schedule approved by the National Archie es and Records Admmismmion is necessary. KRII) can ptovide advice on this: 
vW eed s\ "Q vonq-mencc eeim texputeoumv to; t R\ none Rvcordkecpmp Cmnt \.mot; and XLLNxCh'l y u pdates 
Other: 


and Civil Liberties 


Signature: 
Date Signed: 


James j. Larafon, Deputy General Counsel 
FBI Privacy and CM! L iberties Officer 


Signature: - js?" 

Bate Signed:' " X< / 
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Office of she fkneral v \ ^ ma> \ e? a & v Oct y\. is ^penning the 

Seenmy Division : See D 

X NO If m, indicate reason; if €&& k pending., provide anticipated 

completion dale: _ 

Per the Security Division-, no CXA is required tor fhl§ | ~| b7E 

YES If vest please indicate the following, if known: 

Provide date of last C&A eertifkalion/re-eeriilieefiont 

CYnrfUk'utiaHh:_Law_Moderate_High_Undefined 

Integrity: _Low Moderate High Undefined 

Availability; .Lose Moderate High Undefined 

_Not applicable - this system is only paper-based, 

10, is the sum inoavr d\ ' „ et ,m < '''01 m'”',; c? mOno'-Sim:.' 

_X_NO 

_YES If yes, please provide the date and name or 

title of the OMB submission: 

11. i\ s.'- * v U v t >.v <. is Sec O'! sod M 

! » ^ ' P <. ' * \ ' 

53? 

... X.NO 

___ YES If yes, please describe the data mining function: 

X NO YES 
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A non us of an IT cysmnvprojeeL including application of & now 
technology. that changes- bow information in identifiable form is managed, 
(For example, a change that would creme a more open environment andfor 
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Other provide hm-f 

. NO ... VlN 

If yes: 

a, Frhvkte ctMe/tlde nf the FI A: 

h Has the v-ttpt V a undergone any Hgnhkara changes since the Pi A? 

■ NO VIA 
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UNCLASSIFIED/FOR OFFICI AL, USE ONLY 


n\ u rm \* i*r i * rmin vnov* < om>j no\n j wmiten *m h* m a* rm 

'\ \ \ >VI O fellowm^D \ sPdOO s»iPP I tetf - IA \d? Gw. -AOnM *w Q **» * HVt BOge *t s ^>6^ | 

| P.1A ',s to be completed as a matter of FBI/DOJ discretion. 

| is PI A $o bo published on FBI.GOV tatter any RMD POIA redacrwrtsV .Yes. .Ns Clndwaa; mason;: 


■•:. Pi.A is no; required for the fo) Roving reasorysv 

System dors not cotieeg rnomtaiw or d; seem; note PIP 

System ;s grandfathered Bn existence before 407/2003; do later changes nosing significant privacy risks;;. 
Inlonnauoo Id the system relates to iDteroai government operation*. 

System has been previously assessed under an evaluation similar to a PiA 
x Ho sig.nt.t1car.it or;vary issues (or privacy issues am unchanged ? 

Other Aiescrbxh: 


\ -V. s vi tr \\' V' ' > OPCx s's I * i'tob'' .-V \0 X t "1 o v. Ur s~. ■> u !C 

V n " X v Mw __ 

A pp 1; c abl e SO R N (s): ...N A..... 

Notify FBI HMD RIDS per M10G 190.2.37 .No _Yes--See sample EC on FOLD intranet website here; 

bttp:Ai;orne/DO/OG(PI,117/FCt,O/Rr;vaey(bvl|%20L-bei1'ies7i;201..;b)-aiA/fbi-;n formiogl90-2-2 ee.wpd 


SOAfOSOAN revisionist repaired? .No Yes (indicate retusioos i-ceded}; 


prcp<ue-i'Ct asiAuid Privacy Act ie.;{3) s;aleme-ns 

ibr related Rams? No Sots (indicate forma aRecfed): 

> s . S< ' s X. S V. -. ^ \ 

The system rone coelom Federal iceiuds whether or not si contains Privacy Act requests and. in any event, a records 
schedule approved by the National Archives and Records Administration 0 .necessary. RMD can provide advice or- this 
as well as on compliance, with requirements Or Electronic Recordkeeping Certification and any necessary inmates. 

Other: 

.Ml. 

. Deputy Ococrtd Counsel 

Signature: .,,A" -Ay "A .- . , 

W V . V . \ ' S 0 N -V \ ' V. C 

. . V _ X 
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L INFORMATION ABOUT THE SYSTEM / PROJECT 

I, Frecide a general description of the sptern or prelect that Inelaeles; (a) 
acme uf she sysh'm'gmb^k including associated acronyms; d» MOiemre oC 
che sysfenvpmjocb including In I m’d rmeettone with other projects or systems; 
;e'< pur r-o\o i,C the system go-pet; gt> nurme ot' lie imormatsoe so tM 
rptomlpolect and how if will bo used; le) who will leave access to the 
o' ^ ? a a tv'e m hw v'-'icr- as orcu (V cud tM a) so w* m o on ' ' oil 

users. 

For payttneni and invoice processing Between FedEx and the FBI, 
there Is an established process which allows the FBI to collect billing 
Invoices on delivered Items and make payments to FedEx for the 
approved deliveries, FIPS (FedEx Invoice Processing System) Is an 
a posted version el the legacy system tPirecttiok) previously need to 
complete this process. The FIPS application facilitates Invoice 
approval report generation, data archiving and exception handling. 
The system's purpose Is to assist FtSD with routine tasks involving 
validation and payment of Federal Express shipping Invoices, 

h< FtSD r fern *0£ aid have access o info cat n n the syc v 

(on their specific shipping 

ir l srmat on only delivered via email r x d pe sc i ml lo not to ress 
the application; information is transmitted to them via automated 
email delivery, 

2, 0 s n v, pc ui i iu i i 11 vt i u \ no r s. x u 
wk ' t vu „ \ ,oc s so m e K) 

X_\ It ,w 'Mth klltciX'v wmu \ md t\u ns s o' u m 'vw'* 

sksvnd m to 1 hi Ofw IT i l ho boat I hi I dcs m-u *»* 

othv rw. >se abr rsvh, so- ft \ repos red, ,\rp PE c. t v w ecu, cc, U\ -c. ^pj.;. i .ss,-c 
ath'cn Won m m„ s'' cm a pjekaw' m wot v no smhvJub i >k '\w m s mvnnost -u he a 
omMU w aub o thewnoe mvstmtv torn'> rmwout Vo g?}\ac' smtsotvs me w mmal 

\ r\ |If ves, please continue, S 

T i Is' s X s u 1 s' ! i C W'Kvl' >UU! kSs* S s> It > > i \ 

system about indwodtsats: Bear In rebel that log-on miomsafion may identify or be 
linkable to an individual. 

(Chock all that, apply.) 

The rnforenatiori directly identities specific individuals. 

The information is intended cc be used, in corn unction with other data, elements, 
to indirectly identity spec;he individuals. 
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UNCLASSIFIE11/F0R OFFICIAL USE ONLY 


_ The in formation can be used to distinguish or trace air individual's htenthy , u 

is linked or linkable to specific individuals). 

II you marked any of the above, proceed to Question 4 

None of the above If none of the aben e. describe s in the information dvcs not 
identify specific individuals either directly or indirectly. jiff you cheeked this item, 
STOP here after pros filing the requested description,) 

4. Docs tbc system psojoe' pcitam only to government enmlovces, contractors, or 
consultants? 

..NO _ yes 


5. 1° ,n formation abem 1 'rated Mates cni/etm ot fowfatte admitted permanent mmdem 
aliens setrieved item the system/project byname or other personal identifier? 

NO, (If no, skip to question ?,j 

YES. f If yes, proceed to the next question.) 

6. Dr>es the system project collect any information d reedy from the person who is * e 
subject of the information? 

_NO lit' no, proceed to question 7,j 

YES 


a. Does the systcra/prqjeei support criminal, Cte or PC! investigations <*r 
assessments? 

NO 


YES )ff yes, proceed in question' ?,) 


h. Are subjects of information from whom the information is directly collected 
l ov ded a written Privacy ket (NO) statement (either on the col lection form or via a 
separat e nod ce>? 

_NO |f'he program will need to work with POLE to develop/implement 

the necessary formfsfj 
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I Ml ASMFIH> FOR OFFICIAL X SI' OM 'X 


.YES Identify any forms,. paper or eteetroufe, used to request such 

fmm the Information. sn Eject t 

?. Are Soeml Security Numbers tSSNs) collected, mamlakted or disseminated from the 

\ 0 vs N" \' ' V M.\ XX.. t V, 

_NO YES If yes, cheek ail that apply: 

SSNs are necessary to estahlish/conilrm the ide.nt.hy of subjects, victims,, 
witnesses or sources in this law enforcement or intelligence activity. 

ENN.s am fwcsvu'x m tdenoN : hi petsceotl a rtm manual .almmohatn v 


MV ate sntpon m, si'' otbn'vu-mm ikseribe: 

userm fksenbe: 

.it la not feasible for the systom/proieet to provide special protection to 

SSNs. Explain; 


Yes. Information systems operated by contractors for the FBI may be 
considered Privacy Act systems of records. The Federal Acquisition Regulation 

X * 4 x X.X-V . ^ ' 0 X 4 X v V v'' ! 

cel loots, maintains or dtssemutates Pit and additional requirements may bo 
trapesed as a mauu of Dapana sw ot J,moee no ny Omomt n>ons mob no 
ev, » 1 m tN 11 ' k t! v i t vO n a tot \ , t s„ t u 

system for the FBI 

9, t x 0 ss 0 rx o 'oo' „ * i' b „ ' •• 0\ V 'x \ 

Security Division (SccD)? 

\x^ It u n n x.ta, U 'e O 'U tb i, \ ^ ymtn q y, Mx n, Ox 

completion date: 

.YES If ye% please Indicate the fbJtewfog* if lot owe; 

Provide date of last CAA ctu'ttlYsttorpre''eerttfkation; 
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; Low 

_Moderate_ 


_li:Mieieed 

Mtepltyt 

_ Lot 

_Moderate _ 


_llmdefitiM 

AvAbddldy: 

_f ,f f w 

_Moderate __ 

mgh 
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I M'l.ASMFI* IVFOR OFFICIAL l $K OM Y 


10. K this sy wesn project the subject of at, t A1R-"00 budget suhn ■ Ore w' 

.NO 

YES If yes* please provide the dale and «a»» or 
title of the OYH submMhm: 

i I. Does the system conduct data mining as defined in Section 804 of the 

Implementing Recon.uueodatio.us of the 9/1 i Commission Act of 2007, P i, 1 ] 0- 
Sd'tcodified at 42 U$C 2000ee-3}? 

_NO 

YES If yes, please describe the data mining function; 

12 . Is loir a national security system (as determined by the SecD>? 

NO _YES 


Status of System/ Project: 

This is a new system/ project m development, {If you cheeked this block, 
n FOP, The FTA Is mm complete ami after dh Mon appro* alts) should he 
submitted to Fit I OGOPCLF for final FBI approval and determination if 
PI A and/or other actions are required,! 


IF EXISTING SYSTEMS / PROJECTS 
1, 'A ie;: w >,s tire \\ate?u pr * ueet de* ehy>ed ? 

7 R 'n me 'Astern p*w* et undergone ore sop2deem changes since \p'f. I", ?0p7 ' 
NO f if us\ proceed, so nest pnesuou (II AYj 


YES If yes, indicate which of the follow log changes were involved (mark all 
* hersces that, apply, and provide brief explanation fur each marked channel 

\ ceo', st fo'C rape eewO -ec, \ ^ an " c,v, \.. wen 

\ ekastgs rorn nformatior s a yrn ltd if is an tymoasot s m 
juvondahk to a torrid t sfo is nkrUnfobfo to pauKidat «alnne,o s 

.. A new use of an IT system/project, including application of a non 

technology, shat chances non snionoatfoss m ukshiskiHv fores man s\ ol 
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I.lNC:I ,ASSIF!ID/FOR OFFICI A t USE ONLY 


fbor example, a change that would create a more open environment awlor 
avenue for exposure of data that previously did not exist.) 

\ . .lot cm'a r ' o, mu <r o L ho os tKmy 

merged, centralized,, or matched with other databases, 

_ A .stew method of authenticating the use of and access to 

information In idemtf able form by members of the pub He. 

A systematic I tt corporation of databases of I nib tut at. sort rn 
•denhiiable form purchased or obtained irons commercial or pstbbe sotsrees. 

A new interagency use or shared agency function, that, rests;is in 
new uses or exchanges of information i identifiable form. 

* > w <.> x ot stub s t n x ! * s ' \ s uotx n < ! x.v 

the individuals on whom records are maintained, or the use or 

Other fProvisSe brief explanation!:: 

.NO .Yes 


Lt yes; 

a. Provide date/ibk of the PI A; 

b. Has the system/protect undergone any significant changes since the FI A: 

.NO .YES 


' 5 hx ‘I \ w aim , •v'ph w and bos down n top* cm m* N'mNf Or ■wmnjAd ^ 
t Ft t v. Us *i ( u> s iU apptuwd and rUtm tutvi son * Pi \ n\ ! i * vdv> 

notions are ret|nlredh| 


i \ct osirir.i)ooii omau. vsv o\i % 
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DELETED PAGE INFORMATION SHEET 
FOI/PA# 1272295-0 
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FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS; JThis section vvij) be completed bv the FBI 
} X 1 ‘ JL£Ub_ s Pii_yj x tti il o s . i Y ^ P ,o » v next page and co ntinue.) 


. PIA is required bv the E-Government 

_X_PIA is to be completed as a matter 

Is PIA to be published on FB3.GOV (after 

PIA. is not required for the following 

_System does not collect mainta 

.System is grandfathered (in exi 

_Information in the system relate 

_System has been previously ass 

_No significant privacy issues (o 

_Other (describe): 

Act. 

of F BI/DO.I discretion. 

any RMD F-OI.A redactions)? _Yes. No (indicate reason): 

reason(.s); 

in, or disseminate PM. 

tence before 4/17/2003; no later changes posing significant privacy risks). 

»to internal government operations. 

-ssed under an evaluation similar to a PI A. 

• privacy issues are unchanged). 

Applicable SORN(s); FBI-002 Central 

Notify FBI RMD/R1DS per MIOG 190.2.3 
httpMhome/DO/OGC/LTB/PCLl/Privac} 

SORN/SORN revision(s) required? Ni 

IN ' M s M *RN 

■ .No .) es~~See sample r,L on IN. I..II intranet website here: 

Civii%20!..iberiies%20l.;ihrary/fbrm. tor miugi 90-2-3 ee.wpd 

b Yes 1 indicate revisions needed) 

Piepaseueuss. add Prison Aa-eg h stated 

sente , mm elated forms'; X No Yes (indicate form;-atlectcde 

RECORDS. The program should consult wit 
'Hie system may contain Federal records whet 
schedule approved by the National Archives d 
‘ >f > on cos tpli .me th requii rent 

jh RMD to idenfdy/resolve any federal reeords/electronic records issues. 

Aer or not it: contains Privacy Act requests and, in any event, a records 
] 1 > N.i st> i i h ID e m c \ 

N.. ! icchcue Rcc-udkevomu (Y-nilkation ,md an\ tueessarv update-- 

Other: 


.Monica .Ryan 

FBI Privacy and Civil Liberties Officer 


Signature: < — /?/'" f . 

Date Fume,: FM v \ y" "" 


_ 
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I. INFORMATION ABOUT THE SYSTEM / PROJECT 


1. Provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
system/project, including interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it will be used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to all users. 


Definitions for document: 


a) Name of the system/project, including associated acronyms : | ~ 

b) Structure of the sys tem/project, including interconnections with other 
projects or systems j 


c) Purpose of the system/projectf 


b7E 

b7E 

b7E 


b7E 
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2. Does the system/project collect, maintain, or disse mi nate any information about 
individuals (i.e., a human being or natural person, regardless of nationality)? 
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b7E 


3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Check all that apply.) 

_X_The information directly identifies specific individuals. 

_X_The information is intended to be used, in conjunction with other data elements, 

to indirectly identify specific individuals. 


JX_The information can be used to distinguish or trace an individual’s identity (i.e., it 

is linked or linkable to specific individuals). 


4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

_X_NO_ 


5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 


X YES. 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

_X_NO 


a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 

_X_YES 


7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

X NO 
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Is the system operated by a contractor? 


_X_ 


_No. 


9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

X YES 

ASU Internal Assessment Completed 01/31/14 

• Company: | | b7E 

• Location: Florida, U.S. owned company 

• Counterintelligence Concerns: None 

• Foreign Ownership/Influence: None 

• Criminal Concerns: None 

• Sentinel: No derogatory information found 

• DIVS: No derogatory information found 

• Company Website: No derogatory information found 

10. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 110- 
53 (codified at 42 USC 2000ee-3)? 

X_NO 


11. Is this a national security system (as determined by the SecD)? 

_X YES 

12. Status of System/ Project: 

_X_This is a new system/ project in development. 


II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17, 2003? 
_ NO [If no, proceed to next question (II.3).] 
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